Home / server / Questions / 354740
Accepted
Brian Deragon
Asked: 2012-01-30 06:17:18 +0800 CST

Windows Server 2008 R2, reinstall without losing AD

  • 772

I need to re-build a Server 2008 R2 instance, but I don't want to lose all the current Active Directory info, what's the best way to go about it?

The reason I'm rebuilding over repairing is great, as the server has many issues (I inherited them from previous IT):

  • Cannot upgrade domain forest functionality level from 2000 to 2008
  • Cannot download Windows updates
  • Cannot use Enterprise anti-virus agents
  • SQL Server is non-functional
  • Roles/Feautures error out, and won't even let you view the list
  • Partition structure is messed up

Any one or two of these issues, and I'd just try to repair the server, but at this point; unless there's no way to safely migrate the AD users/permissions, I think I'm better off with a clean install.

windows-server-2008 domain-controller active-directory domain reinstall

2 Answers

  1. Best Answer

    Install another AD server, replicate AD information, then rebuild the original? You should have more than one AD server; they'd replicate your information (except for specific roles.) That's supposed to protect from having an AD server crash or losing connectivity, so your network continues to function with most of the functionality.

    • 5

  2. If you want to continue using this Active Directory on rebuild server you may as well go and fix the problems first. Considering that you can't do much about upgrading forest functionality etc means you already have problems with AD that will require fixing (I really doubt that simply by reinstalling server and reimporting same AD data will fix the problems).

    Fix Active Directory and all the problems and then migrate AD (and other things) as per @Bart suggestion to a temporary location (like setup a VM on your laptop, make it secondary AD and migrate everything to it using trial license). Then when you are sure AD migrated properly, (most likely you will have to fix AD first anyway for that to succeed) databases are copied, remove AD from main server (using dcpromo and Roles and Features - hence why you should have to fix your server first). Simply backing up System Data and Registry and reapplying it to reinstalled server may cause serious consequences and be pain in the a...

    Also I would suggest using some imaging software to mirror drives to make sure you have a working copy (it's easy to forget some important thing).

    • 1